1
0
mirror of synced 2026-01-08 03:01:54 -05:00
Files
docs/data/reusables/actions/hosted-runner-security.md
2022-08-22 14:27:56 +10:00

3 lines
412 B
Markdown

We recommend that you only use {% data variables.actions.hosted_runner %}s with private repositories:
- Forks of your repository can potentially run dangerous code on your {% data variables.actions.hosted_runner %} by creating a pull request that executes the code in a workflow.
- You could incur unexpected costs if you allow forked repositories to run jobs on your {% data variables.actions.hosted_runner %}s.